๐ซ๐ท
HerrWolf
2026-11-03 23:30:06
(3 minutes ago)
CrowdSec Detection: crowdsecurity/http-sensitive-files
Web App Attack
๐ซ๐ฎ
paissangroup
2026-11-03 23:25:27
(8 minutes ago)
Multiple WAF Violations
Web App Attack
๐ต๐ฑ
srebrakowski.com
2026-11-03 22:58:20
(35 minutes ago)
crowdsec/waf-detected-exploits
Brute-Force
๐ฆ๐บ
Klaverstyn
2026-11-03 22:39:09
(54 minutes ago)
Repeated 403 Forbidden responses
Web App Attack
Anonymous
2026-11-02 21:48:25
(1 day ago)
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 45.153.34.217 (NL/The Netherlands/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.153.34.217 - - [02/Nov/2026:22:48:16 +0100] "GET /.env.local HTTP/1 ...
show more
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 45.153.34.217 (NL/The Netherlands/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.153.34.217 - - [02/Nov/2026:22:48:16 +0100] "GET /.env.local HTTP/1.1" 406 497 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.153.34.217 - - [02/Nov/2026:22:48:16 +0100] "GET /.env HTTP/1.1" 406 497 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.153.34.217 - - [02/Nov/2026:22:48:21 +0100] "GET /.env.backup HTTP/1.1" 406 497 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
show less
Port Scan
๐จ๐ณ
Peter Yu
2026-11-02 19:38:32
(1 day ago)
Bad Web Bot
Web App Attack
๐ฏ๐ต
gomasy
2026-11-02 16:39:12
(1 day ago)
gomasy.dev:80 45.153.34.217 - - [03/Nov/2026:01:39:11 +0900] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36"
...
Web App Attack
๐ฉ๐ฐ
SaltySoftworks
2026-11-02 16:35:53
(1 day ago)
Page: /phpinfo.php
Hacking
Web App Attack
๐ฌ๐ง
consul.to
2026-11-02 16:33:40
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
๐ธ๐ช
Minglarn
2026-11-02 14:23:39
(1 day ago)
Malicious crawler, scraper or bad bot detected. (3 hits). Log: 45.153.34.217 - - [02/Nov/2026:14:23:39 +0000] "GET /[REDACTED_DOMAIN] HTTP/1.1" 404 952 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0"
45.153.34.217 ...
show more
Malicious crawler, scraper or bad bot detected. (3 hits). Log: 45.153.34.217 - - [02/Nov/2026:14:23:39 +0000] "GET /[REDACTED_DOMAIN] HTTP/1.1" 404 952 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0"
45.153.34.217 - - [02/Nov/2026:14:23:39 +0000] "GET /[REDACTED_DOMAIN] HTTP/1.1" 404 952 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
show less
Bad Web Bot
๐ณ๐ฑ
Alt255
2026-11-02 12:39:17
(1 day ago)
[backup01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 45.153.34.217 - - [02/Nov/2026:13:39:14 +0100] "GET /phpinfo.php HTTP/1.1" 301 501 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Ge ...
show more
[backup01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 45.153.34.217 - - [02/Nov/2026:13:39:14 +0100] "GET /phpinfo.php HTTP/1.1" 301 501 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-11-02 12:36:03
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
๐ฎ๐น
itsvic.dev
2026-11-02 11:57:10
(1 day ago)
45.153.34.217 - - [02/Nov/2026:11:57:08 +0000] "ntfy.itsvic.dev" "GET /info.php HTTP/1.1" 404 237 439 "http://ntfy.itsvic.dev/info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 E ...
show more
45.153.34.217 - - [02/Nov/2026:11:57:08 +0000] "ntfy.itsvic.dev" "GET /info.php HTTP/1.1" 404 237 439 "http://ntfy.itsvic.dev/info.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Edg/123.0.0.0"
45.153.34.217 - - [02/Nov/2026:11:57:09 +0000] "ntfy.itsvic.dev" "GET /phpinfo.php HTTP/1.1" 404 237 437 "http://ntfy.itsvic.dev/phpinfo.php" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36"
45.153.34.217 - - [02/Nov/2026:11:57:09 +0000] "ntfy.itsvic.dev" "GET /test.php HTTP/1.1" 404 237 431 "http://ntfy.itsvic.dev/test.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
...
show less
Brute-Force
Web App Attack
๐ฌ๐ง
Celtic
2026-11-02 11:52:08
(1 day ago)
Blocked by Fail2Ban with Jail (plesk-modsecurity)
Brute-Force
SSH
๐ซ๐ฎ
as211431.net
2026-11-02 11:41:38
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.env.staging
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
This report was ...
show more
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.env.staging
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot